MikroTik

grg

Great article and pics! I need to do the same. The TG.35.8113 (big flat antenna) and MB.200.C (antenna mount) would be best for my application. I live in the US and I'm having trouble finding them online, can you provide the info where you bought them from. Thanks! I got TG.35.8113 from www.digikey...

grg

MikroTik community: After struggling with MIMO 2x2 and side-by-side dual band (2.4GHz + 5GHz) wireless performance issues, I managed to isolate it down to default antennas, which get installed in aluminum cases. Either it's proximity of them to each other (severe de-tuning and interference) or their...

grg

Has anyone successfully deployed SCEP on RouterOS? After I approve new certificate requests, I'm getting "requesting-certificate-failed" message. Mikrotik manual is very vague on SCEP, therefore, I don't really know what behavior I should expect. I want to use it to quickly enroll certific...

grg

Hi, I have a Mikrotik RB915G-2HnD router and the problem is that sometimes when I start using the wifi from my iPhone 5 (7.0.4) every once in a while this makes the router go inaccessible - all devices lose internet, the wifi signal does not disappear but there is no internet access. Usually this l...

grg

Hello everyone. I have a question related to practical use of bridge interface in RouterOS. I have seen many examples of bridge interfaces involved in different configuration scenarios, however I have not seen any specific best practice nor specific purpose recommendations regarding their use. I hav...

grg

I had the same issue with routing between VLANs on bonding interface some time ago, but I haven't really had a time to deal with it and check how it works with newer ROS.

grg

I would prefer if there was something like send WoL packet option when you right click on DHCP lease and bring up the menu in WinBox.

grg

This is what I get after performing upgrade on my RB493G: [admin@MikroTik] /ip service> print [admin@MikroTik] /ip service> print Flags: X - disabled, I - invalid # NAME PORT ADDRESS CERTIFICATE 0 telnet 23 1 ftp 21 2 X www 80 3 I ssh 22 4 X www-ssl 443 none 5 X api 8728 6 I winbox 8291 [admin@Mikro...

grg

Random reboots is a problem with this release. I get them on CCR1036 and RB411AH.

grg

Is DHCP confirmed broken? YES. I can confirm that in 6.0rc6, DHCP is unstable. It works for awhile, then it stops giving out ip addresses. The computers just sit there trying and trying to get an address. If I reboot the router, the computers get an IP address right away. It happened to me once too...

grg

Basically this would be the same as you looking at packet sniffer. There is just too many type of packets that can be dropped. It could be more or less something simple. Aggregating them into IPv4, IPv6, Other protocol, Driver related drops would be sufficient. This way it would be easier to differ...

grg

About those RX drops, I already explained above, that these are not new drops, they are the same drops that you had before, but now we can correctly count them. This is all invalid traffic. For example IPv6 traffic if you have no IPv6 package etc. Would it be possible to implement additional Rx/Tx ...

grg

is there any idea how to cause this? In my case it took time for it to stop responding. Two or three days, maybe. It's a network with around 50 clients. This is my interface configuration: /interface bridge add name=bridge_local add l2mtu=1590 name=bridge_internet /interface vlan add interface=brid...

grg

I had the same issue this morning on my CCR1036-12G-4S with ROS v6.0rc6. DHCP service stopped issuing IP addresses on all VLAN interfaces. I had to tinker around with it until I got it to work again. I think disabling and re-enabling DHCP servers fixed it, but I'm not completely sure about it. Mikro...

grg

My CCR1036-12G-4S is getting constant Rx Drops on Bridge, VLAN and some physical interfaces. This happens with both, ROS6.0rc5 and ROS6.0rc6 versions. Now, when I upgraded my RB433AH with ROS6.0rc6, it started to the same thing - show Rx Drops on one of the interfaces (incoming Internet). I never h...

grg

My CCR1036-12G-4S is getting constant Rx Drops on Bridge, VLAN and some physical interfaces. This happens with both, ROS6.0rc5 and ROS6.0rc6 versions. Now, when I upgraded my RB433AH with ROS6.0rc6, it started to the same thing - show Rx Drops on one of the interfaces (incoming Internet). I never ha...

grg

Did you receive the CCR ?
Yes.
On development site is 6.0rc6 for TILE

This development site you are talking about, is it for "selected" people only? I don't think I have seen such before.

grg

Lucky you ! Whats the version on it ?

Device: CCR1036-12G-4S
Software: RouterOs v6.0rc5

grg

Did you receive the CCR ?

Yes.

grg

I cannot find ROS v6.0rc5 tile package download on MikroTik web site for new CCR devices. I'm looking for extra package: NTP. Is this something that has to be addressed through MikroTik support?

Thanks.

grg

Strongly agree.

grg

So now that there are 36 and 16 core versions, will there be a "Light" version like: * 9 core TILE CPU * 4 GBit ports + (1-2 SFP ports) * no display * passive cooling * wire-speed gigabit routing (with non-conntrack firewall) * priced at < $250 That is the router I've been searching for q...

grg

I recently had the same problem with my RB433AH. It stopped booting and I had to reflash it using Netinstall. It did it next day after I upgraded it with R52HN wireless adapter. It was couple of years old unit and I never had any problems with it before.

grg

Fully agree on this one.

grg

In my opinion, MikroTik team should take VPN issues more seriously. What's the point of manufacturing hardware like RB1100AHx2 with encryption acceleration, when you can't use it in real life scenarios. I mean, you have an option to use it, but then you are faced with all those issues people are tal...

grg

RB1100AH (ROS 5.2) and Cisco 2950 was having unstable connection when connected using bonded interface. Is this a problem with Atheros chips MT is using? It never happens with chips of other brands.

grg

Version 5.0 still has the same FQDN problem. Mikrotik, if you don't want to make it a permanent change in code then please, at least add it as an option we could turn on or off. Something like a mode to work with broken IPSec clients.

Thanks.

grg

grg

Is there a way to set up firewall rules, that would only allow connection if it's encrypted? I'm asking this because to be able to use IPSec/L2TP I have to allow L2TP (UDP 1701) port for incoming connections on public interface. However there is no way I can make sure that L2TP connection is actuall...

grg

I think I got the same problem with vlans on bonding interface.

grg

FYI. It works with v5rc11, however I was not able to find anything in the changelog from rc8-rc11, that would give me any obvious clue about what made it happen. Was something changed with interface stability with ciscos?

grg

First thing to start with, if you want to play with IPSec you have to have latest v5 release, because version 4 does not include NAT-T fix. Another thing to remember is that IPSec server behind NAT firewall is deemed to fail. Even if you would manage to make it your main firewall with global IP addr...

grg

Hello MT community. I have run into a problem with RB1100 (ROS 5rc7, fw 2.29) when I try to use it in conjuntion with Cisco 3750 (or 3550) switch. I have set up bonding interface on my RB1100 using 802.3ad mode for balancing and fault tolerance and EtherChannel with LACP on Cisco to utilize two phys...

grg

I would be happy not only to see this problem being fixed, but also IPSec having DH groups going above 5.

grg

I'm being curious about why there are only first five DH groups available and nothing above? Does MikroTik have any plans on changing that?

grg

Now I had a chance to test it with Windows Vista and I was able to successfully establish VPN link using the same settings and Internet connection that I used for testing Windows XP client. Probably ROS needs some minor quickfix to be able to communicate with XP too.

grg

Try v5rc2

*) ipsec - supports NAT-T drafts

That's what I was using.

grg

I decided to create this topic for MT community members to respond about changes in IPSec and the results with different clients. I'm going to do the first post with results I got using Windows XP Pro client with the same settings that worked with real IP address and didn't when client was behind NA...

grg

Ok, I am trying to get my UPNP working or port forwarding so my Windows Home Server is accessable from the outside. I enabled UPNP, set my lan side to internat and my Wan side to external and enabled the dummy rule. When WHS opens the correct ports I can see them in the NAT table and they are being...

grg

I found my previous solution useless with dynamic external IP address. In my opinion MikroTik should update UPnP the way that it also adds dynamic forward firewall rule matching NAT rule that it adds or something like that.

grg

Am I the only one who is somehow concerned about those blue LEDs that are used on routerboards? What I want to say is that I find them way out of balance with other unit LEDs by their light intensity. I know that there are many DIY fixes to solve this problem, but anyway, wouldn't it make more sense...

grg

This is what I use to cover uPnP needs: /ip firewall mangle add action=mark-packet chain=prerouting comment="Marks packets for checking against NATed destinations" connection-state=new disabled=no dst-address=<my external ip address on mikrotik> new-packet-mark=nat passthrough=yes /ip fire...

grg

MikroTik community: I have one example that I would like to get your opinion about. I'm using upnp on my routerboard to deal with p2p and IM applications. Basically what it does, it creates dynamic NAT rules. However it does not do anything with forward chain. That is the thing I need to configure m...

grg

Is your MacBook behind NAT? You might want to make sure about that, because there is an issue with such setup: http://forum.mikrotik.com/viewtopic.php?f=2&t=33595 . I faced it when I was trying to set up IPSec/L2TP VPN on my XP laptop. You must exclude this one before you take any further action...

grg

Yesterday I was trying to set up L2TP/IPSec VPN using ROS v4.11 with public IP and Windows XP SP3 client behind NAT with the same result: it does not work when client is behind NAT. Instead of encapsulating replies it sends data to NAT router IP address directly. I just went through all related post...

Search found 44 matches